This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b920fdf-f9f6-45bb-9fe1-ced6c8bcd1d6.roa
File:                     7b920fdf-f9f6-45bb-9fe1-ced6c8bcd1d6.roa (raw, json)
Hash identifier:          WhB2vOnRaqtMV10C/rT3xysUBCPMq1EzTwtigSefN1E=
Subject key identifier:   86:65:48:C2:D6:63:6A:5D:06:D1:ED:FF:82:F8:E2:36:BE:4B:51:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78E8649400BEB96E09AE39275FB6D0D414CFF853
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b920fdf-f9f6-45bb-9fe1-ced6c8bcd1d6.roa
Signing time:             Wed 03 Dec 2025 01:00:32 +0000
ROA not before:           Wed 03 Dec 2025 01:00:32 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:2c00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e8:64:94:00:be:b9:6e:09:ae:39:27:5f:b6:d0:d4:14:cf:f8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:00:32 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=4816a36a4bb94255b2067a8234cf69927494a8426ff0c30ca5b51a835c732ff2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:ab:6a:59:fe:ee:df:50:b8:67:27:54:cc:
                    2f:94:5b:c6:f6:da:f1:56:cb:8f:0d:f9:c2:d0:ba:
                    63:bc:9e:03:08:3f:79:d3:14:30:a3:ce:a0:94:c9:
                    c2:ce:02:2c:3d:79:44:68:5b:0e:b5:88:f1:cd:fd:
                    c6:7a:23:df:8f:81:5a:ca:ad:f5:10:7b:93:0e:e2:
                    61:54:3a:a0:86:e9:f6:19:15:7c:2d:86:15:f4:21:
                    f5:b7:b8:b7:11:95:e0:47:98:26:1e:d4:92:e7:4c:
                    41:1c:62:e5:06:7a:28:9d:40:27:7f:8e:95:8c:43:
                    56:7e:55:65:5b:45:1d:6b:5f:d0:11:ba:ad:37:82:
                    64:f2:22:97:2d:bd:c7:48:a7:a3:6e:d5:58:b2:d3:
                    e9:08:df:8b:65:29:91:83:3b:6d:98:1a:23:32:81:
                    34:e9:26:1f:fc:fa:81:c1:2d:7b:b3:9e:e5:f1:38:
                    14:f7:cd:4c:2d:31:bc:1a:59:35:7a:b3:70:82:69:
                    b3:ae:54:31:1e:13:bf:4f:b1:7e:91:59:de:47:5a:
                    a0:d0:88:f1:a1:06:40:38:d3:f3:8e:23:2e:96:e4:
                    88:50:17:6f:60:f8:af:ae:80:d3:7d:86:69:51:12:
                    b4:f6:6d:1b:88:7b:f3:89:12:b3:e2:38:ab:fb:c6:
                    50:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:65:48:C2:D6:63:6A:5D:06:D1:ED:FF:82:F8:E2:36:BE:4B:51:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b920fdf-f9f6-45bb-9fe1-ced6c8bcd1d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:0e:84:fd:51:19:e8:0e:96:45:48:e4:c0:ab:0f:d5:9f:a3:
         07:83:14:2a:49:e2:cd:b2:af:f2:2a:34:a8:6b:20:09:97:61:
         3e:6f:16:bf:ea:92:44:6a:00:35:56:67:2a:6c:27:ad:a5:e3:
         79:40:b2:85:cd:c8:7d:8d:1c:98:1c:82:ec:d2:1e:6f:99:18:
         0e:89:77:b6:91:78:c8:73:55:30:33:42:1b:8e:d9:6d:8f:67:
         68:31:02:90:d4:28:bc:c8:03:26:54:32:f4:4a:fb:51:08:6b:
         61:08:5f:aa:4a:b0:bf:a4:14:48:7e:3e:ce:71:de:ac:5e:75:
         48:ca:31:c5:59:df:3f:a0:3f:03:4d:cc:ee:3c:42:6d:a9:4b:
         f6:6b:46:f1:c2:2d:63:d9:4a:e2:93:90:fe:6a:49:ef:35:1a:
         8d:c3:56:7e:42:7c:c9:6f:dd:27:7e:ac:43:e7:b0:f8:6f:09:
         91:88:02:99:f6:ba:20:83:c3:f3:0e:e6:d3:9a:99:ff:b0:fd:
         87:d5:5c:36:bc:81:c8:18:42:cb:5e:07:77:91:32:a2:d2:f9:
         b1:a4:11:70:d8:ac:ee:45:78:ad:3b:46:e8:aa:84:77:ac:64:
         cb:89:cd:f7:ff:71:08:ec:a4:60:4d:a1:81:b9:6f:f1:d9:6b:
         0b:03:e7:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:18:10 2025 by rpki-client